Eumentis CLI for AWS

A powerful CLI tool that automates AWS SSO configuration and profile management across multiple AWS accounts and roles.

Quick Start

npx @eumentis/aws config --ssoStartUrl <url> --awsRegion <region>

Then use any AWS CLI command like:

aws s3 ls --profile 111122223333_AdministratorAccess

What It Does

• Creates or updates AWS SSO config in ~/.aws/config
• Authenticates your SSO session via login flow
• Fetches all your available AWS accounts and roles
• Generates AWS CLI profiles for each role
• Adds account name comments for clarity

Prerequisites

• AWS CLI v2 installed (Installation guide)
• AWS SSO access with necessary permissions

How to use

Run the Config Command

npx @eumentis/aws config --ssoStartUrl <url> --awsRegion <region> [--ssoSessionName <name>]

Required Options

• --ssoStartUrl: Your organization's AWS SSO start URL
  Example: https://your-org.awsapps.com/start

• --awsRegion: AWS region where your SSO directory is configured
  Example: us-east-1

Optional

• --ssoSessionName: Name for your SSO session (default: default-sso)

Full Example

npx @eumentis/aws config \
  --ssoStartUrl https://AnyCompany.awsapps.com/start \
  --awsRegion us-east-1

Generated Profile Format

# Account Name (e.g., Production)
[profile 111122223333_AdministratorAccess]
sso_account_id = 111122223333
sso_role_name = AdministratorAccess
sso_session = default-sso
output = json

Using the Generated Profiles

After running the tool, use the profiles like this:

aws s3 ls --profile 111122223333_AdministratorAccess

Or set the profile as your default:

export AWS_PROFILE=111122223333_AdministratorAccess

Benefits

• Time-saving: Eliminates manual profile setup across accounts
• Error prevention: Ensures consistent and correct configuration
• Discovery: Automatically finds all accessible accounts and roles
• Readability: Adds account names as comments for easy identification
• Maintenance: Keeps your AWS configuration up-to-date

Troubleshooting

If you encounter issues:

• Check AWS CLI version: aws --version
• Validate your session: aws sso login --sso-session <session-name>
• Confirm SSO URL and region are correct